This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/qwRgsQyWceddvM_GZ0mcBzGmfsw.roa File: qwRgsQyWceddvM_GZ0mcBzGmfsw.roa (raw, json) Hash identifier: u5m7OeUQAJztt6tYqPBa102kwAghmU7lU7GBR2CQZGI= Subject key identifier: AB:04:60:B1:0C:96:71:E7:5D:BC:CF:C6:67:49:9C:07:31:A6:7E:CC Certificate issuer: /CN=56c107a13d5807b792f7a557b2fbad58f944a19f Certificate serial: 019B78A24B2EED27E20F92638BA08BD02EA9 Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/qwRgsQyWceddvM_GZ0mcBzGmfsw.roa Signing time: Thu 01 Jan 2026 08:17:40 +0000 ROA not before: Thu 01 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 91.209.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4b:2e:ed:27:e2:0f:92:63:8b:a0:8b:d0:2e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f Validity Not Before: Jan 1 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab0460b10c9671e75dbccfc667499c0731a67ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7d:4f:81:56:9c:65:f6:9c:9f:72:08:cd:f2: 01:3f:62:21:60:af:a2:21:c1:44:d9:fe:e5:02:c0: 50:e7:2e:41:94:dc:0a:d8:e6:40:36:ff:de:e9:20: 7d:09:0d:1d:4d:1c:fb:0f:68:8e:4d:d5:3f:ab:bb: fc:b4:b0:ae:ae:e1:3a:2f:3c:36:ac:38:46:39:1d: 18:b8:42:97:56:3b:7b:a3:41:7a:a1:62:14:c8:b4: 54:8a:07:30:e5:4f:62:50:4f:68:c0:ba:3c:1c:12: ba:09:3e:64:f7:74:a5:d2:86:f6:0e:27:c3:51:b3: e3:84:90:c0:5e:88:7f:01:df:4f:ac:63:62:f9:cf: fe:ec:38:ac:ad:b0:84:05:e1:95:5a:6d:ef:1f:52: 82:4d:de:d2:fd:5f:4f:54:e2:82:2f:aa:9c:dc:34: 5e:b0:80:6e:6b:bf:c1:2b:aa:ca:23:e8:15:70:d2: 75:dc:03:86:d1:85:38:a5:24:fc:b1:3d:d7:55:76: 03:1e:39:d2:8b:27:cb:26:7d:52:6b:9c:be:05:0f: e3:54:55:ac:62:6f:ff:88:af:36:51:c4:6f:d7:4c: 2d:ad:55:68:ee:b8:d6:b1:b7:65:63:5b:88:58:58: 80:d2:d9:02:91:68:70:ab:61:40:e3:2d:8f:9c:00: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:04:60:B1:0C:96:71:E7:5D:BC:CF:C6:67:49:9C:07:31:A6:7E:CC X509v3 Authority Key Identifier: keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/qwRgsQyWceddvM_GZ0mcBzGmfsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.87.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:ec:fc:fe:c9:43:b4:ee:24:c9:76:aa:c9:68:2e:99:40:0c: 56:aa:ca:f6:16:d1:39:6e:18:2d:89:b2:9d:db:cc:39:f0:ad: ef:f6:c3:6e:d6:eb:3c:8c:7a:d9:f8:d5:a1:c3:7d:0e:70:38: 87:8c:26:3b:23:4b:07:b1:41:ca:aa:de:7a:5c:9a:4d:56:c0: 68:2f:82:5a:29:c9:a1:54:e5:55:ae:2f:ef:d1:d8:98:9a:93: 5b:66:bc:d4:76:07:64:eb:66:6e:be:3f:84:3a:03:c4:7c:75: db:ed:a1:f9:f4:69:78:7b:06:89:6c:60:0e:e6:68:b4:3a:33: 22:b3:3f:26:ef:da:f2:bd:f6:b0:83:78:1f:59:e5:fa:9a:73: 20:f6:81:87:51:55:42:58:42:e5:3e:0c:86:76:18:da:f8:d5: 7e:08:83:e7:3d:c5:25:d6:93:02:58:9c:db:c4:b8:fa:2d:d4: c2:75:74:b3:20:fc:cf:9f:30:5e:fa:5f:a2:b6:dd:8f:34:d3: 1b:89:10:40:7f:7c:14:d1:8b:b6:f4:f3:8a:da:8b:ab:98:8f: 4c:09:8e:53:2b:ac:25:31:34:9e:cd:46:73:f7:9f:c6:33:9c: 22:81:2c:8e:e5:55:97:e6:1c:78:8b:f7:fa:b4:2b:ea:d0:64: ea:8b:74:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oksu7SfiD5Jji6CL0C6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YzEwN2ExM2Q1ODA3Yjc5MmY3YTU1N2IyZmJhZDU4Zjk0 NGExOWYwHhcNMjYwMTAxMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjA0NjBiMTBjOTY3MWU3NWRiY2NmYzY2NzQ5OWMwNzMxYTY3ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl31PgVacZfacn3IIzfIBP2IhYK+i IcFE2f7lAsBQ5y5BlNwK2OZANv/e6SB9CQ0dTRz7D2iOTdU/q7v8tLCuruE6Lzw2 rDhGOR0YuEKXVjt7o0F6oWIUyLRUigcw5U9iUE9owLo8HBK6CT5k93Sl0ob2DifD UbPjhJDAXoh/Ad9PrGNi+c/+7DisrbCEBeGVWm3vH1KCTd7S/V9PVOKCL6qc3DRe sIBua7/BK6rKI+gVcNJ13AOG0YU4pST8sT3XVXYDHjnSiyfLJn1Sa5y+BQ/jVFWs Ym//iK82UcRv10wtrVVo7rjWsbdlY1uIWFiA0tkCkWhwq2FA4y2PnAAi5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsEYLEMlnHnXbzPxmdJnAcxpn7MMB8GA1UdIwQY MBaAFFbBB6E9WAe3kvelV7L7rVj5RKGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUt ZjMwZTE3NDU0ZTRiLzEvcXdSZ3NReVdjZWRkdk1fR1owbWNCekdtZnN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUtZjMwZTE3NDU0ZTRi LzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9FXMA0G CSqGSIb3DQEBCwUAA4IBAQA87Pz+yUO07iTJdqrJaC6ZQAxWqsr2FtE5bhgtibKd 28w58K3v9sNu1us8jHrZ+NWhw30OcDiHjCY7I0sHsUHKqt56XJpNVsBoL4JaKcmh VOVVri/v0diYmpNbZrzUdgdk62Zuvj+EOgPEfHXb7aH59Gl4ewaJbGAO5mi0OjMi sz8m79ryvfawg3gfWeX6mnMg9oGHUVVCWELlPgyGdhja+NV+CIPnPcUl1pMCWJzb xLj6LdTCdXSzIPzPnzBe+l+itt2PNNMbiRBAf3wU0Yu29POK2ourmI9MCY5TK6wl MTSezUZz95/GM5wigSyO5VWX5hx4i/f6tCvq0GTqi3St -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:01 2026 by rpki-client